PT-2022-4919
CVE-2021-20046
·
Published
2022-01-05
·
Updated
2022-01-19
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
SonicOS (affected versions not specified)
Description
A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. The issue is related to the exploitation of a buffer overflow vulnerability, which can lead to arbitrary code execution or service disruption.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾